CLAIMS 



1 y . A computer-implemented method for digitally signing data, comprising: 
0|. j^^j^j generating a lattice haying at least one short basis establishing a 

| private key and at least one long basis establishing a public key; 

If] I X 

4 I \ \ mapping at least the message fi or a concatenation thereof to a message 

5 point "x^in n-dimensional space using a function "f 1 rendering infeasible the 

6 possibilityyof mapping two messages close together in the space; and 

■S usinathe short basis, finding a lattice point "y" of the lattice X that is 

:j§ close to the message point "x". 

nj 2. The methocKof Claim 1, further comprising returning at least the 

3 \ 

C2 message point "x" and the lattice point "y" as a digital signature. 

yi 3. The method of ClaiV 2, further comprising randomizing the function 

2 M f*. \ 

1 4. The method of Claim 3, wherein the function "f ' is randomized by 

2 concatenating the message |i with a random Yumber p. 

1 5. The method of Claim 1, wherein tke function M f ! maps the message |a 

2 to a point on a grid. \ 
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The method of Claim 5, wherein the function "f 1 is collision intractable. 




7. \ The method of Claim 6, wherein the collision intractability of the 
function "f 1 i^yderived from the hardness of lattice problems. 

8. TheNfnethod of Claim 5, wherein the function "f is not collision 
intractable. 



9. The methoti of Claim 1, wherein the function "f maps at least the 
message to a point on an auxiliary lattice. 

10. The method of Clami 1 , further comprising verifying a digital signature 
at least in part by determining whether a difference between the lattice point "y M and 
the message point "x" is no more thanV predetermined distance. 

11. The method of Claim 1 0, wherein the predetermined distance is related 
to the number of dimensions in the lattice 5£. 



12. A computer program storage device including a program of instructions 
for generating a digital signature for a message, the program of instructions including: 
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V * # 

3 \ computer readable code means for mapping a message (i or a 

4 concatenation thereof to a message point "x M in n-dimensional space, the 

5 message point "x" being a point of a grid or a point of an auxiliary lattice; 

6 computer readable code means for finding a point "y" of a key lattice 

7 that is nearby the message point "x"; and 

8 /~\ { computer readable code means for establishing a digital signature, based 

9 / if i at least on the joints "x" and "y". 

4 ; 13. The computenprogram storage device of Claim 12, wherein the means 

I \ 

M for mapping uses a function "A rendering infeasible the possibility of mapping two 

y| messages close together in the space, and wherein the means for finding includes 

Pi using a hard to find short basis of the key lattice i£. 

Lih \ 

r 2 14. The computer program storage device of Claim 13, further comprising 

yj \ 

D \ 
means for randomizing the function "f. \ 

1 15. The computer program storage Uevice of Claim 14, wherein the 

2 function "f 1 is randomized by concatenating the message |i with a random number p. 

1 16. The computer program storage device of Claim 12, wherein the 

2 function "f ' maps the message \x to a point on a grid, and wherein the function "f ' is 
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collision intractable, the collision intractability being derived from the hardness of 
latticte problems. 

17\ The computer program storage device of Claim 12, wherein the 
function "f ' re not collision intractable. 

18. Thev computer program storage device of Claim 13, wherein the 
function "f 1 maps at\east the message to a point on an auxiliary lattice. 

19. A compute\system for generating a digital signature of a message |i, 
comprising: \ 

at least one sendet computer including logic for executing method steps 
including: Y 

mapping the message |i to a message point "x" at which it is 
not feasible to map any Vher message; 

finding a lattice point "y" that is relatively close to the message 
point "x"; and \ 

transmitting at least the message \x and the points "x M and M y"; 
at least one receiver computer receVing the message (i and points "x" 
and M y" and including logic for executing method steps including: 

determining whether a distance between the points "x" and "y M 
is related in a predetermined way to a predetermined distance, and 
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\ based thereon determining whether the message |i has been properly 
\ signed. 

20. \ The system of Claim 19, wherein the mapping act is undertaken using 
a function "f that maps the message point "x" to a point of a grid or of an auxiliary 
lattice, and furtheX wherein the lattice point "y" is a member of a lattice and the 
finding act is undertaken using a hard-to-find short basis of the lattice i£. 

21. The systemVf Claim 20, wherein the acts undertaken by the logic of 
the sender computer further comprise randomizing the function "f by concatenating 
the message \x with a random nufcnber p. 

22. The system of Claim\20, wherein the function M f f is collision 
intractable. \ 

23. The system of Claim 22, wherein the collision intractability of the 
function "f is derived from the hardness of latticte problems. 

24. The system of Claim 20, wherein the ^function "f is not collision 
intractable. \ 
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{25. The system of Claim 20, wherein the predetermined distance is related 
to the niimher "r" of dimensions in the lattice ££. 




26. \ A computer-implemented method for digitally signing data, comprising: 
generating a lattice i£ having at least one short basis and at least one 
long basis; 

mapphag at least the message \x or a concatenation thereof to a message 
point "x" in n-dVnensional space, the message point "x" being an element of 
a set of spaced-apart points; and 

using the shorKbasis, finding a lattice point "y" of the lattice 52 that is 
close to the message poim Y.' 



27. The method of Claim wherein the mapping is undertaken using a 
function "f". 

28. The method of Claim 27, furtherVomprising randomizing the function 
"f ' by concatenating the message \x with a randonknumber p. 



29. The method of Claim 27, wherein the function "f ' maps the message 
|i to a point on a grid. 
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50. The method of Claim 29, wherein the function "f is collision 
intractable 

31. Yhe method of Claim 30, wherein the collision intractability of the 
function "f ' is delved from the hardness of lattice problems. 

32. The method of Claim 29, wherein the function "f is not collision 
intractable. 

33. The method of &aim 27, wherein the function "f maps at least the 
message to a point on an auxiliaryNlattice. 

34. The method of Claim 2ol further comprising verifying a digital 
signature at least in part by determining whether a difference between the lattice point 
"y" and the message point V is no more than \ predetermined distance. ' 



35. The method of Claim 34, wherein the predetermined distance is related 
to the number of dimensions in the lattice ££. 
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